Infinum and E.ON Hrvatska hosted an event on digital accessibility – and used the occasion to unveil a new energy management app built to the highest accessibility standards.

The event brought together clients, partners, and practitioners for an evening of talks, hands-on exploration, and honest conversation about where the industry stands on accessibility. 

Two speakers – Paula Dujmović Kordić, Call Centre and Support Group Lead from E.ON Hrvatska, and Ana Šekerija, Accessibility Lead at Infinum – covered the state of digital accessibility today, what the new E.ON app does differently, and why building for everyone is no longer optional.

“Blind people don’t use our app”

That’s a direct quote – something a client once said to Šekerija, as a reason not to invest in accessibility. Ana opened the event by explaining why that statement is wrong on three counts.

First, the assumption about who needs accessible products is too narrow. Accessibility isn’t just about visual impairment. Around 16% of the global population – 1.3 billion people – lives with some form of disability, according to WHO. 

Temporary limitations – a broken arm, post-surgery recovery – and situational ones – bright sunlight, background noise, a moving vehicle – affect everyone at some point. 

Second, the assumption that those users aren’t already on your platform is wrong. 50% of iOS users and 72% of Android users have at least one accessibility setting enabled on their device. They’re already there.

Third, accessibility isn’t a niche feature. It’s a better product for everyone.

The regulatory pressure is real and growing. The European Accessibility Act came into force on 28 June 2025. In Croatia, non-compliance carries fines of up to €132,720.

The first lawsuits are already underway – four of France’s largest retailers (Auchan, Carrefour, E. Leclerc, and Picard) are currently awaiting court rulings after failing to meet correction deadlines following formal warnings last year.

Ana also flagged a less obvious trend: the growing number of accessibility errors in modern digital products, likely driven in part by AI-generated code – trained on existing, often inaccessible applications. But that is not the case with E.ON.

The future is bright with new E.ON app

Paula Dujmović Kordić, Call Centre and Support Group Lead at E.ON Hrvatska, took the stage next to present the new E.ON Hrvatska mobile app – developed in partnership with Infinum, and the first solution on the Croatian market to combine electricity and gas management in a single platform.

The app was built with accessibility at its foundation, not bolted on at the end. That meant enhanced contrast ratios, scalable fonts, landscape mode support, full compatibility with screen readers, correctly spaced interactive elements, and clearly labeled interface components. An Accessibility Statement is publicly available both on the web and within the app.

The results after launch reflect the investment: App Store ratings more than doubled, 12,000 users onboarded with zero reported accessibility complaints, and all new users opted for e-billing.

In collaboration with Slovenia’s leading supplementary pension insurance provider, we’ve built a Flutter multi-platform app that runs seamlessly across mobile and web from a single codebase.

Modra zavarovalnica is a leading provider of supplementary pension insurance in Slovenia, dedicated to creating accessible financial solutions that strengthen individuals’ social security throughout all stages of life. For more than a decade, the company has played an important role in supporting the stability of the country’s pension system while managing savings for more than 300,000 members.

Looking to expand their communication channels and give members greater control over their pension savings, Modra partnered with Infinum to design and build their mobile experience. In 2024, we built a Flutter app for iOS and Android that makes pension savings management simple and transparent. Following a successful mobile rollout, the partnership expanded with a Flutter web app. The vision was straightforward but technically ambitious: a single, unified self-service portal available on both mobile and web, with the same features, the same experience, and the same codebase powering both.

The result is a self-service customer portal where Modra members can check their pension savings in real time, review investment performance, manage documents, run tax and pension calculators, adjust their investment strategy, and manage beneficiaries — all by themselves, on any device, whenever they want.

The power of Flutter: one codebase for multiple platforms

Flutter is already a popular choice for mobile app development. Flutter Web, on the other hand, has only recently reached the maturity required for production systems at this scale. Together with Modra, we embraced the opportunity early and invested in a shared architecture designed to support both mobile and web from the start, putting Modra ahead of where most of the industry still is.

However, building across mobile and web from a single codebase isn’t without its challenges. UI components had to work seamlessly across very different screen sizes and interaction patterns, and the margin for inconsistency was zero. We tackled this by building a flexible component system and shared logic designed to behave naturally on both platforms, so members get the same intuitive experience whether they’re on a phone or a laptop.

To support a true multi-device experience, we had to harmonize the login flow between desktop and mobile while keeping it seamless for members. Mobile devices are personal by nature, typically used by one person. Desktop is different: the same computer might be shared by multiple people at home or at work. To account for this, we introduced multi-user support on the web app, allowing registered users to return to their own accounts from a shared device through a user selection screen.

We also layered in additional security measures: members accessing the platform from a public or shared PC are prompted through an OTP (One-Time Password) flow, and the same applies if the app has been left inactive for more than 15 minutes. The functionality of the platform is identical across devices, but the login experience is tailored to how people actually use each one.

A partnership built on trust and adaptability

Technology choices matter. But so does who you make them with. Over the years, Modra and Infinum have built a partnership that treats the product as a living thing, adapting continuously to user feedback, market changes, emerging technologies, and evolving business needs.

Our collaboration continues with a longer-term vision: transforming the portal from a static, screen-based interface into an intelligent, adaptive experience that supports members throughout every stage of their journey.

For a deeper look at the project, read the full case study. If your organization is facing a similar challenge, get in touch with our experts to learn how we can support you.

We have achieved ISO 45001 certification – the premier international standard for occupational health and safety management systems – driven by our customers and our commitment to meeting the same rigorous standards as the Critical National Infrastructure environments we work in.

Our cybersecurity work takes us into some of the most demanding operational environments in the UK – water processing plants, energy facilities, and other Critical National Infrastructure sites. 

The organisations operating in these sectors are held to the highest safety standards. They expect the same from everyone who works alongside them.

ISO 45001:2018 is the premier international standard for occupational health and safety (OH&S) management systems, developed by the International Organization for Standardization. It sets the global benchmark for how organisations identify, eliminate, and control workplace hazards.

The certification covers:

Earning it means we have a certified, proactive framework for managing risk and protecting our people, wherever the work takes them.

Why this matters and what drove it

For most organisations, ISO 45001 is about building a strong internal safety culture. For us, it’s also a practical necessity.

We often work far from our desks. Water processing plants, energy facilities, Critical National Infrastructure sites – these are real environments with real operational risk.

They require us to work safely in environments where the consequences of getting it wrong extend well beyond our own team. Our clients, such as Anglian Water, rightly expect us to meet the same safety standards they hold themselves to, and ISO 45001 gives them that assurance in writing.

What it means for our clients

If you work with us in regulated or high-risk sectors, ISO 45001 certification is evidence that our operational practices meet international best practice, not just in the abstract, but verified by an independent audit body.

We take our people into complex environments. This certification confirms we take that responsibility seriously.

Cybersecurity is on your radar in the coming months? Learn more about our cybersecurity services or contact us to discuss a project.  

Three salesmen walked into a room… and delivered something between a stand up set, a masterclass, and a confessional. Needless to say, the fourth edition of Business Unusual did not disappoint.

On March 25, the 13th floor of Infinum’s Zagreb office filled up fast. The fourth edition of Business Unusual brought together the local business development community for an evening focused on the moments that truly decide a deal: not the playbooks, but the messier, more human factors: timing, ego, luck, and knowing when to walk away.

The format shifted slightly from the previous edition. Instead of a panel, three speakers took the floor solo, and each one treated the stage with the seriousness of a stand-up set. Naturally, what they delivered was part war story, part life lesson.

Hosted by Nikola Vrabec, Business Development Manager at Infinum, the event featured Domagoj Ostović, CEO & Founder of Lloyds Digital; Mladen Milavić, entrepreneur and seasoned sales leader; and Vedran Sorić, CEO & Business Co-Owner at Prodajni Mindset.

Our SOC 2 Type II audit confirms that our security controls operate effectively over time–not just on paper, but in practice.

Data breaches are more frequent, more costly, and more damaging to client trust than ever. For companies that build and manage digital products, the question partners and enterprise clients increasingly ask isn’t whether you take security seriously, it’s how you can prove it. 

SOC 2 Type II is the answer: an independent, structured audit that verifies your security controls actually work, sustained over time.

What SOC 2 Type II actually means

SOC 2 (System and Organization Controls 2) is a voluntary framework developed by the American Institute of Certified Public Accountants (AICPA) for service providers that handle customer data. 

It evaluates organisations against defined Trust Services Criteria, Security being the mandatory baseline, and results in a formal attestation report issued by an independent CPA auditor.

Our SOC 2 journey began with a Type I audit, which assessed whether the right controls were designed and in place – a necessary first step toward establishing baseline compliance. 

Type II goes significantly further: it evaluates whether those controls operate effectively over a sustained period, providing independent confirmation that our security practices are not only well-designed but consistently applied in real-world operations.

What it means for our clients

When a client shares sensitive data or integrates their systems with ours, they shouldn’t have to take our word for it. The SOC 2 Type II report gives them something more useful: a structured, independent record of how we actually handle that responsibility.

An ongoing commitment

SOC 2 Type II isn’t something you achieve and file away. 

Maintaining it requires continuous monitoring, regular audits, and a company-wide discipline around security practices – and that’s exactly how we treat it. For our clients, that means the assurance doesn’t expire.

Infinum’s cybersecurity team provides compliance support, penetration testing, third-party risk management, and secure development advisory for enterprise and regulated-industry clients. Learn more at infinum.com/cybersecurity.

In collaboration with E.ON Hrvatska, we built the first solution on the Croatian market that combines electricity and gas management in a single app and offers AI-powered meter readings.

Energy powers almost every moment of modern life, yet the tools people use to manage it often feel stuck in the past. On the Croatian market, not all energy providers offer a digital experience, and those that do usually provide only basic functionality. For many customers, everyday tasks like checking payment status or submitting meter readings still mean calling customer support or visiting a physical branch.

E.ON Hrvatska saw an opportunity to change that.

Digital experience that matches the energy of a leading brand

E.ON Hrvatska is the Croatian branch of the E.ON Group, one of Europe’s largest energy providers serving more than 47 million customers. The company supplies electricity and gas to households and businesses across Croatia while expanding its portfolio with solar energy solutions and EV-related services.

As an ambitious and fast-growing player on the Croatian market, E.ON wanted its digital presence to reflect its commitment to innovation, customer care, and the green transition. They’re on a mission to push the industry’s boundaries and advance innovation to solve Europe’s most pressing energy challenges. But their existing mobile app didn’t reflect that ambition.

The app offered limited functionality and delivered a frustrating user experience. With low App Store ratings and frequent customer requests for a better solution, it became clear that the app needed a complete rebuild.

Setting a new benchmark for utility apps

In 2025, E.ON Hrvatska partnered with Infinum to redesign and rebuild their mobile platform from scratch. In just five months, we delivered a high-impact MVP that reimagines how customers interact with their energy provider. The new app allows users to track gas and electricity consumption, submit meter readings, and manage their bills within a single, intuitive interface.

By combining a seamless user experience with powerful self-service capabilities, the platform simplifies everyday energy management while reducing pressure on E.ON’s customer support center.

Results followed quickly after launch. App Store ratings more than doubled, a clear signal that customers were finally getting the experience they had been waiting for. Customer behavior shifted as well. All new app users opted for e-billing, directly supporting E.ON Hrvatska’s sustainability agenda.

Smarter energy management powered by AI

The new platform also introduces practical AI features designed to reduce manual input and speed up routine tasks.

Users can now submit gas and electricity meter readings simply by taking a photo. A large language model processes the image, extracts the numbers from the meter, and pre-fills the submission form inside the app. This is especially useful when meters are located in difficult-to-reach places or when lighting conditions make manual entry inconvenient.

The same technology also powers another feature: scanning an ID card to update personal information within the app.

The future looks bright

The collaboration between Infinum and E.ON Hrvatska continues with an ambitious roadmap ahead. Soon, customers will be able to message E.ON directly through the app, pay bills without leaving the platform, receive estimated bill calculations, and request refunds in just a few taps. Future releases will also expand access to smaller B2B customers and introduce real-time tracking for solar energy projects, giving users greater transparency into their transition to renewable energy.

For more details on the project, read the full case study. If your business faces a similar challenge, contact us to learn how we can turn that challenge into an innovative digital product that propels your business forward.

London is full of hidden gems, even on gloomy March evenings, and one recent standout was an exclusive, invite-only evening hosted by Infinum, which brought together the city’s cybersecurity and tech leaders to explore last year’s biggest threats and what lies ahead — featuring perspectives from the NFL, AMR CyberSecurity, and AI governance experts.

The panel featured Kam Karaji, Director of Cybersecurity & Risk Management for the NFL and NFL International Series; Martin Walsham, Director of CyberSecurity at AMR CyberSecurity – Part of Infinum, which Infinum acquired in December 2025; and Eric Alter AI Risk & Governance Consultant at EA AI. Debbie Jones of PRPR agency moderated the discussion.

Sharing perspectives

The conversation covered ground that’s reshaping how organizations think about security: the surge in AI-driven threats, increasingly sophisticated phishing campaigns, and what 2025’s major incidents revealed about modern vulnerabilities.

Infinum has been recognized as an authorized and certified partner in the Databricks Consulting and System Integrator (C&SI) Partner Program, helping organizations implement, migrate to, and scale the Databricks Data Intelligence Platform.

Through this partnership, Infinum will support companies in building modern data platforms and transforming complex data ecosystems into AI-driven insights and intelligent applications.

As organizations continue investing in AI and advanced analytics, many still struggle with fragmented data infrastructure, legacy systems, and complex pipelines that slow innovation. By combining Infinum’s consulting and engineering expertise with the Databricks Data Intelligence Platform, companies can modernize their data architecture, unify analytics and AI workloads, and accelerate data-driven decision-making.

Building intelligent applications brick by brick with Databricks

The Databricks Data Intelligence Platform democratizes access to analytics and intelligent applications by combining customer data with powerful AI models tailored to each organization’s unique business context. Built on a lakehouse architecture with open data formats and governance, the platform ensures that organizations maintain full control over their data.

Through this partnership, Infinum provides consulting, implementation, and engineering services designed to help organizations fully leverage the Databricks platform. 

These services include:

“With organizations looking to unlock the full value of their data, modern platforms like Databricks are becoming critical for scaling analytics and AI,” said Željko Plesac, Infinum’s Partnerships Director. 

“Through our partnership with Databricks, we’re helping companies modernize their data infrastructure and transform their data into actionable insights that drive smarter business decisions.”

By combining Infinum’s expertise in data engineering, cloud, and AI with the capabilities of the Databricks platform, organizations can build scalable data ecosystems that power advanced analytics, machine learning, and next-generation digital products.

The National Cyber Security Centre (NCSC) has introduced a new UK assurance methodology focused on strengthening the cyber resilience of connected products and services. AMR CyberSecurity, Part of Infinum, is now one of only four organisations in the UK authorised to deliver this independent evaluation.

As cyber threats escalate, organisations need clear evidence that the technology they rely on can withstand real-world attacks. The NCSC’s Cyber Resilience Test Facility (CRTF) scheme provides that assurance through structured, independent testing against nationally defined standards.

A new benchmark for independent cyber assurance

Certified Cyber Resilience Test Facilities are authorised to assess connected products using the NCSC’s Principles-Based Assurance (PBA) methodology and its Assurance Principles & Claims (APCs).

In practical terms, this means we independently test how well a product resists cyber attacks through its public interfaces – the points most commonly targeted by threat actors. The outcome is evidence-based assurance that demonstrates real-world resilience, not just policy compliance.

For technology vendors, this provides a credible way to verify security claims and demonstrate alignment with recognised national standards to customers and stakeholders. For buyers, it delivers greater confidence when selecting products and managing supply chain risk.

A trusted position in a select group

CRTF status is awarded only to organisations that can demonstrate proven technical expertise, robust assessment processes, and operational independence.

With only four certified facilities in the UK, this recognition reinforces our position as a trusted authority in cyber resilience testing.

Our services now enable technology vendors to:

“Being one of only four certified Cyber Resilience Test Facilities in the UK is both a significant milestone and a strong endorsement of our technical capability and independence,” said Martin Walsham, Director at AMR CyberSecurity, Part of Infinum.

Why Cyber Resilience Testing matters now

Cyber threats are evolving rapidly, and organisations can no longer rely solely on compliance statements or self-attestation. Independent, structured assurance strengthens supply chain confidence, supports informed procurement decisions, and promotes higher security standards across the UK market.

This certification marks an important step forward in our mission to enhance cyber resilience nationwide. As a certified CRTF, we look forward to working with vendors to build stronger, more secure connected products and contribute to a more resilient digital future. 

If you would like to assess your product’s cyber resilience or understand your third-party cyber risk exposure, contact our senior consultants to learn how we can support you.

We’ve officially earned The Climate Label for 2025. We’re proud to be part of the growing movement to eliminate greenhouse gas emissions under the world’s most trusted climate label. 

After two years as a Climate Neutral Certified brand, we’re entering a new chapter. In 2025, the certification evolved into The Climate Label, a more rigorous framework that moves beyond the traditional “carbon neutrality” model. 

Under the previous model, companies measured their emissions and then purchased carbon credits to “offset” the remaining emissions in order to claim carbon neutrality. Carbon credits are tradable certificates that represent the removal or reduction of one tonne of CO₂ (or equivalent greenhouse gases). They typically fund climate projects such as reforestation, renewable energy development, or methane capture.

The new certification program raises the expectations. It shifts the focus from symbolic balancing to tangible accountability. To earn The Climate Label, companies must introduce an internal carbon fee and use it to fund emissions reductions across their operations and supply chain. They must transparently report their emissions, establish reduction targets, and clearly demonstrate how their funding contributes to real climate impact.

On the road to net zero

Net zero is a global goal aimed at balancing the amount of greenhouse gases emitted with the amount removed from the atmosphere. It is not a one-time milestone, but an ongoing, collective effort that requires consistent action and long-term commitment from governments, industries, and individual companies alike.

As part of that effort, we worked with the Change Climate team to measure our company’s total 2024 carbon footprint, set time-bound Reduction Action Plans, and established a dedicated Climate Transition Budget to invest in carbon projects that met Change Climate’s rigorous Standard.  

Measure

Understanding our impact is the first step toward reducing it. In 2024, our total carbon footprint amounted to 819 tCO₂e — a reduction compared to the previous two years. To arrive at this number, we included all emissions associated with delivering our services, from office energy consumption and hardware use to business travel, employee commuting, and supply chain activities.

Fund

Working with the Change Climate team, we used our total emissions to calculate how much to invest in climate action. We then invested $11,164 directly to reduce emissions in our own operations through a full LED retrofit across our offices. Because electricity is our primary emissions driver, upgrading to energy-efficient lighting is one of the most effective ways to reduce our footprint. 

Reduce

After identifying our main emissions hotspots, we created 12–24 month Reduction Action Plans to further reduce our impact. As a tech company, we do not operate factories or produce physical goods. Our footprint comes primarily from our offices, energy use, business travel, and hardware. That is where we focus our efforts.

By extending the lifecycle of our equipment by more than 50%, we reduce electronic waste and avoid the carbon emissions tied to manufacturing new hardware.

At the same time, we’re strengthening the structure behind our sustainability efforts. With support from the European Bank for Reconstruction and Development (EBRD) through its Blue Ribbon programme, we are working with an approved advisory partner to improve how we track, assess, and report our environmental, social, and governance performance.

This gives us clearer insight into the parameters that matter most, increases transparency, and helps us better understand where we perform well and where we need to improve. By strengthening our ESG governance and reporting today, we are ensuring that our climate efforts remain measurable, focused, and aligned with evolving EU standards.

Advocate

For us, climate responsibility isn’t about earning a shiny certification or improving numbers in a report. It’s about running our business responsibly, setting an example in our industry, and making sure our people are part of this journey. That includes sharing knowledge with our community and supporting our team members in adopting more sustainable practices through education and practical tools.

Additional details about our certification are available on this website and within Change Climate’s public profile directory.